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Closed user group service in a mobile communication system 

The present invention relates to a method of providing closed user 
group service in a mobile communication system enabling packet-switched 
5 data services, comprising at least one network and at least one group com- 
prising a plurality of group subscribers, the network enabling the transfer of 
packets to pre-defined group subscribers. 

The invention further relates to a telecommunicatkin system pro- 
viding packet-s\Aritched data services, comprising at least one network and at 
10 least one group comprising a plurality of group subscribers, the network being 
arranged to transfer pacdcets to pre-defined group subscribers. 

The invention also relates to a network element in a packet radio 

system. 

In addition to nomial speech and data transmission, mobile com- 

16 munication systems provide a plurality of supplementary services for subscrib- 
ers. One of the supplementary services provided in some mobile communica- 
tion systems Is closed user group service. By means of the closed user group 
service, several different restrictions concerning the internal or external tele- 
communicattons can be defined for a selected group of subscribers. Call re- 

20 strictions available Include e.g. barring of incoming or outgoing calls and bar- 
ring of calls to certain numbers. Closed user groups are typically applied in 
companies, in which it is desirable to restrict the use of mobile stattons given 
to employees mainly to professional purposes. In the call set-up process, 
dosed user groups cause additional checks, on the t>asis of which call set up 

25 is either continued normally or is discontinued due to call restrictions. 

A closed user group (CUG) supplementary service has been speci- 
fied for GSM (Global System for Mobile Communications) circuit switched 
services. The CUG service enables subscribers to form closed user groups to 
and from which access is restrk;ted, A specific user may be a member of one 

30 or more CUGs. Members of a specific CUG can communicate with each other 
but not, in general, with users outside the group. 

GSM 02.85 V. 5,0,0 defines Stage 1 of the CUG supplementary 
service. In the GSM system, a closed user group is identified unequivocally by 
means of a CUG interlock code IC. Closed user groups are indicated to a sub- 

36 scriber with a CUG index, which is typically converted in the visitor location 
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register VLR. When the user belongs to several closed user groups, one group 
may be appointed as the preferential CUG. 

Group-spedfic definitions of the members of a closed user group, 
hereafter refen-ed to as CUG subscribers, can be further specified by adding 
5 or removing restrictions. Subscription options may allow only calls within a 
CUG or also inter-CUG access may be allowed. A CUG subscriber with in- 
coming access can receive calls from outside the subscriber group. Corre- 
spondingly, a CUG subscriber with outgoing access can also maice calls out- 
side the group. There may be also intra-CUG restrictions: Incoming calls 
10 banned within a group prevents a CUG subscriber from receiving calls from 
other members of the same group. Correspondingly, a CUG sut>scriber with 
outgoing calls barred within a group cannot call other members of the same 
group. 

As the use of different data transmission services in offices has in- 

15 creased, different data sen/ices have also been introduced into mobile com- 
munication systems. In order to allow packet-switched data transmission in 
GSM networi^s, general packet radio service (GPRS) has been developed. 
The GPRS allows the service subscriber to send and receive data In an end- 
to-end packet transfer mode. 

20 There are two categories of GPRS servk:es: point to point (PTP) 

services and point to multipoint (PTM) services. The PTP service provides a 
transmission of one or more packets between two users, initiated by a service 
requester and received by a receiver. The GPRS PTM services provide a sub- 
scriber with the capability to send data to multiple destinations with a single 

25 service request. There are three PTM services: PTM Multicast (PTM-M), PTM 
Group Call (PTM-G) and IP (Internet Protocol) Multicast (IP-M). 

The PTM Group Call is a service which enables packets to be 
transmitted within a specified group klentlfied by IMGI (International Mobile 
Group Identity). The PTM-G service allows members of a PTM-G group to 

30 establish a logical relationship within the group for the purposes of transferring 
data. This logical relationship may be referred to as a group calL The packets 
are transmitted only within cells which are known to contain participants of the 
specific receiver gnDup. Optionally the transfer of packets may be limited to 
group participants within the geographical area(s) as defined by the servk)e 

36 requester. 
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The PTM-G service has three different subscription classes. The 
controller has a right to create and to remove a group and control over the 
memberships. The initiator has a right to initiate and to terminate group calls, 
and to communicate with other group members. The participant has a right to 

5 communicate with other group members. 

A group call initiator initiates a group cali by means of a call Initiate 
operation. The network assigns a call identification and confirms to the initiator 
that the call has been created and optionally transmit a group-call-notlfication 
to all the group members. A group memb»er may choose to Join a group call 

10 and thereby become a group call participant, by infomiing the network by the 
join call operation. A participant may leave a group call at any time by Infomn- 
ing the network by the leave call operation. Data transfer operations may oc- 
cur at any time following group call initiation. Data transfers for the group call 
may be restricted to the geographical area designated during the group call 

15 initiate operation. Data transfers are distributed only to the participants includ- 
ing the initiator The initiator may terminate a group call by means of the call 
terminate operation. The networi^ notifies the participants of the group call 
termination. For more details of the PTM-G service, reference is made to GSM 
specification 02.60, v. 8.0.0, pages 15-27. 

20 There are situations, when group members may need to exchange 

data packets with terminals not fc>elonging to the group. Also, a group member 
may wish to send a document to or receive a message from a colleague also 
belonging to the group. However, especially in the GPRS, a group subscriber 
using the PTM-G servk;e is only able to send packets to all memk>ers of the 

26 group and receive data only from the members of the group. 

The object of the invention is to provkle a method and means for 
eliminating the problems described above. A method according to the inven- 
tion Is characterized by 

determining closed user group access conditions for at least one 

30 subscriber belonging to the group, saM access conditions comprising at least 
one of the following conditions: 

right to communicate with parties outside the group, 
right to communicate with at least one member of the group without 
communicating with all members of the group, 

35 ched^ing said access conditions when packets are being sent 

to/from the subscriber and 
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transferring packets to desired addresses if said aooess conditions 
allow the transmission. 

The mobile telecommunications system according to the invention 
is characterized in that 
5 the network comprises means for determining closed user group 

access conditions for at least one subscriber belonging to the group, said ac- 
cess conditions comprising at least one of the following conditions: 

right to ccmimuntcate with parties outside the group, 

right to communicate with at least one member of the group without 
1 0 communicating with ail membm of the group, 

the network is arranged to check said access conditions when 
packets are being sent to/from the subscriber and 

the network is arranged to transfer packets to desired addresses If 
said access conditions allow the transmission. 
15 The neturark element according to the invention is characterized in 

that 

the network element comprises means for determining access con- 
ditions for at least one subscriber belonging to at least one closed user group, 
said access conditk^ns comprising at least one of the following conditions: 
20 right to communicate wHh parties outside the group, 

right to communicate with at least one member of the group without 
communicating with all members of the group, 

the network element comprises means for checking said access 
conditions when packets are being sent to/from the subscrit)er_and 
25 the network element is arranged to send packets if said access 

conditions allow the transmission. 

The preferred embodiments of the invention are set forth in the de- 
pendent claims. 

The invention is based on enabling the subscriber to send padcets 
30 to or receive packets from parties outside the closed user group and/or ena- 
bling a closed user group $ub$crit>er to communicate with at least one sut>- 
scriber belonging to the same group. This can be done by determining closed 
user group access conditions for at least one subscriber preferably in a cen- 
tralized data base and checking the access conditions every time packets are 
35 being sent to/from the subscriber Packets are transmitted if the access condi- 
tions allow the transmission. There may be access conditions determining the 
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addresses allowed to a group subscriber. The access conditions may advan- 
tageously be determined separately for incoming and outgoing packets, i.e. a 
subscriber may have the right to send packets outside the group but not to re- 
ceive packets outside the group. The group may be selected during the actn 

5 vation of a data transfer arrangement, e.g. durirtg the PDP context activation, 
or the group may be identified when packets are t>elng sent. 

The invention enables dosed user group service in networks pro- 
viding packet data services, such as the GPRS with similar features as speci- 
fied for the GSM CUG service. Especially, a group subscriber is able to send 

10 packets to or receive packets from addresses outside the group and/or two or 
more group subscribers are able to communicate bilaterally. Furthermore, the 
subscriber may send packets to part of the group subscribers, it is possible to 
determine very detailed access conditions for each sut)scril:>er. According to a 
preferred embodiment of the invention, it rs possible to send adjacent packets 

15 without reoiiecking the access conditions after the first packet if source and 
destination addresses are the same in the adjacent packets as in the first 
packet. This reduces the number of CUG access conditton checks in the net- 
work. Yet another advantage of an embodiment of the inventton is that the 
subscriber is able to t>e involved In several closed user groups. 

20 The invention will be described in further detail in the folk>wing by 

means of preferred embodiments with reference to the accompanying draw- 
ings, in which 

Figure 1 describes the basic elenients of GSM/GPRS mobile com- 
munication system; 

26 Figure 2 illustrates different CUG subscriber access conditions; 

Figure 3 is an exemplary signalling diagram of service activation 
and CUG selection for a CUG subscrit^er; 

Figure 4 Is a flow diagram illustrating the functionality of PTM-SC for 
CUG subscribers. 

30 In the following, the invention will be described by using the func- 

tions and structure of the GSM/GPRS system as an example, but the invention 
can also be applied to other similar mobile communication systems providing 
packet-switched services. As the specifications of the GPRS are not as ad- 
vanced as those of many other GSM specifications, all GPRS temns should be 

35 interpreted as being descriptive rather than limiting terms. 
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Figure 1 describes the basic components of the GSM/GPRS system 
without iilustrating their features or other components of the system in greater 
detail. A mobile station MS is located in a cell sensed by a base station BTS. 
The MS comprises a removable SIM application (Subscriber identity Module). 
5 A number of base stations are connected to a base station controller BSC 
which controls the radio frequencies and channels. Base station controllers 
BSC are connected to a mobile services switching centre MSC. 

In Figure 1, the GPRS system connected to the GSM network com- 
prises one serving GPRS support node SGSN and GPRS gateway support 
10 node GGSN. The different SGSNs and GGSNs are interconnected by a back- 
bone networt<, which is typically based on IP-protocols. 

The SGSN is connected to the BSC and is the service access point 
to the GPRS networi^ for the GPRS mobile station MS. The SGSN also han- 
dles the authentication of GPRS mobile stations. If the authentication is suc- 
15 cessful, the SGSN registers the MS to the GPRS network and takes care of its 
i mobility management. When the MS wants to send data to external networks, 

the SGSN relays the data to the relevant GGSN after routing context Is estab- 
\ lished. The home location register HLR comprises GPRS subscriber data and 

routing information and is typically also used by the MSC. 
20 The GGSN is connected to the external networks PDN such as 

other operators' GPRS systems, the Internet, the X.25, and the Integrated 
? Services Digital Network (ISDN). From the external networi^s' point of view the 

GGSN is a router to a subnetwork, because the GGSN hides the GPRS Infra- 
structure from the external networks. When the GGSN recdves data ad- 
25 dressed to a GPRS subscriber it checks rf the address is ac^e. If so, the 
GGSN fonwards the data to the SGSN serving the MS, but if the address is in- 
active, the data is typically discarded. The mobile originated packets are 
routed to external networks PDN by the GGSN. 
'i ' The point-to-multipoint senrice centre (PTM-SC) is the access point 

30 to PTM services and the central element in the PTM system. The PTM-SC re- 
ceives PTM service requests from different entities and takes care of the 
; r scheduling, transmisston and retransmission of packets according to given 

user parameters. According to the Invention, the PTM-SC may have access 
1 also to the external networks PDN. 

\ ' ' 35 As regards a more precise description of the GSM/GPRS system, 

reference is made to ETSI (European Telecommunications Standards Insti- 

:i 
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tute) GPRS specificdtions and to 'The GSM system for Mobile Communicsh 
Hons', M. Mouty and M. Pautet, Palaiseau, France, 1992. ISBN: 2-9507190-0- 

0-7. 

The CUG service fiincticnality In GPRS may be implemented as an 

5 enhancement to the already specified services. In the fbtlowing a preferred 
embodiment of the Invention is described, in which the additional functionality 
required for the CUG service is added to the PTM-SC network element 

The PTM-SC according to the preferred embodiment of the Inven- 
tion comprises CUG.subscniDer information and takes care of the delivery of 

10 packets to the right CUG subscribers according to predefined access condi- 
tions. Also packet transfer outside the CUG may be possible. The PTM-SC 
comprises necessary infbrmatton about CUG groups and subscribers prefera- 
bly in a CUG database DB memory. The PTM-SC comprises means for defin- 
ing the CUG subscriber from source or destination address field of packets. 

15 The packets may also comprise other CUG-related information such as an in- 
dication on tPie requested CUG. . ' 

CUG information may be organized in many ways e.g. group- 
specifically or subscriber-specrfically. Figure 2 Illustrates CUG subscriber ac- 
cess conditions In the DB for subscriber A. Subscriber A data 20 may com- 

20 prise the subscribed CUGs and, optionally, information about a preferred 
CUG. The access conditions for each CUG 21, 22 may be determined sepa- 
rately. The access conditions may be divided into intra-group access condi- 
tions 23 and inter-group access conditions 24 which can be further spectfied 
by separate conditions for incoming and outgoing packets. Intra-group condi- 

26 tions 23 may thus define wiiether the subscriber has the right to receive pack- 
ets from member of CUG 25 (lAG, Incoming Access within the group) or to 
send packets to members of CUG 26 (DAG, Outgoing Access within the 
group). Correspondingly the inter-group conditions 24 may further define 
whether the subscriber has right to send 28 (OA. Outgoing Access) or receive 

30 27 (lA, Incoming Access) packets outside the CUG. For instance, there are 
four possible inter-group conditions: The subscriber is not able to communi- 
cate outside the CUG, the subscriber is able to send packets outside the CUG, 
the subscriber is able to receive packets from outside the CUG or the sub- 
scriber is able to both send and receive packets outside the CUG. It is not 

36 necessary to determine conditions for each category described above. Pref- 
erably at least the inter-group conditions are defined for CUG subscribers. 
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The access cx)nditions may also comprise a list of allowed or denied 
addresses 29, which are typically IP addresses. Preferably the addresses 
to/from which access is allowed are listed. There may be also other CUG re- 
lated information 30 in the DB such as the applicability to different services. It 
6 is not mandatory to have information in each access condition category. 

All traffic to and from CUG subscribers goes preferably through the 
PTM-SC. In order to determine, check and modify the access conditions, the 
PTM-SC comprises at least memory and data processing means. The PTM- 
SC checks the access conditions in the DB and allows service provision when 

10 appropriate. Preferably the same principles as specified for the GSM CUG 
service in 02.85 v. 5,0.0 will be used when the PTM-SC makes the decisions 
for service provision for GPRS CUG subscribers. For instance, if a CUG sub- 
scriber with a preferential CUG but no OA capability requests the activation of 
routing context (PDP context activation) without any CUG infomnation, the 

15 packets will be sent according to the preferential CUG. The PTM-SC according 
to the preferred embodiment of the invention may also serve CUG subscribers 
firom fixed networks. 

In the following sen/k:e activation and CUG selection for a CUG 
subscriber will be described with reference to Figure 3. GPRS attach Is per- 

20 formed when an MS indicates its presence to the GPRS networt< for the pur- 
pose of using GPRS services. This can be done immediately after the MS has 
been switched on or later as the subscriber decides to use the GPRS services. 
The MS identifies itself witii its GSM identity IMSI (International Mobile Sub- 
scriber Identity) or TLLI (Temporary Logical Link Identity). The GPRS attach 

25 for a CUG subscriber may be carried out according to tfie prior art GPRS 
technology [GPRS attach]. 

The Packet Data Protocol (PDP) context functtons are networic level 
functions, which are used to bind the MS to various PDP addresses and after 
use to unbind the MS firom these addresses. The PDP context defines differ- 

30 ent data transmission parameters, such as the PDP type (e.g. X.25 or IP), 
PDP address, quality of service QoS and NSAPl (Network Sen/rce Access 
Point Identifier). Vyhen the MS is attached to the networt<, it has to activate all 
the PDP addresses it wants to use for data tiaffic with the outside networi<s. 
After tiie PDP context is activated, MS, SGSN, GGSN or according to the in- 

35 vention the PTM-SC, have mapping and routing information for transferring 
packets for that particular PDP address. PDP addresses may be allocated dy- 
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namically to mobile stations, or static PDP addresses for each mobile station 
may be used. It is also possible to use an anonymous PDP context with a 
certain predefined anonymous access service provider. 

According to a preferred embodiment of the invention, the PTM-SC 

5 comprises the same kind of functionality as the GGSN does, which enables 
the PTM'SC to communicate with external networks. However, it is also possi- 
ble that data to/from external networks goes through tfie GGSN. 

A request for PDP context activation Is sent to the SGSN when a 
CU6 subscriber wants to activate GPRS data transfer functions 

10 [activate_PDP_context_req]. The MS indicates whether dynamic or static PDP 
address will be used. The request also cornprtees information related to the 
requested PDP context, such as the requested quality of service. The request 
for PDP context activation advantageously comprises also the address of the 
PTM-SC, The address of the PTM-SC may be In the APN-fie!d (Access Point 

15 Name), which typically refers to the external packet data networit the sub- 
scriber Wishes to connect to. The request may comprise CUG specific pa- 
rameters requested by the MS, such as the identifier for the requested CUG. 
The CUG specific parameters may t>e in the PDP Configuration-field of the 
PDP context activation request message [actlvate_PDP_context_reql. 

20 After receiving the request for PDP context activation, the SGSN 

may initiate typical GPRS security functions [security functions]. The SGSN 
sends a PDP context activation request message comprising information 
about the requested PDP context to the PTM-SC [create_PDP_context_req]- 
The address of the PTM-SC may also be obtained from the subscriber data in 

25 the SGSN or HLR. The PTM-SC may be restricted to be the only possible 
GPRS access point for the CUG subscriber CUG specific parameters are sent 
transparently through the SGSN to the PTM-SC in the message 
[create_PDP_context_req]. In GPRS there are also private extensions avail- 
able, when CUG specific messages are not needed for the communication 

30 between the SGSN and the PTM-SC- 

The PTM-SC comprises information for each CUG subscriber as 
described. The PTM-SC finds out the CUG which the subscriber wishes to 
select on the basis of the CUG klentifier. If no CUG identifier is receh/ed, the 
PTM-SC may select a preferential CUG if one is determined for the subscriber. 

36 Thus the access conditions of the selected CUG will be used when packets 
are sent to or received for the subscriber. [CUG selection] 
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if the PDP context activation request is acceptable, the PDP context 
may be activated. The PTM-SC preferably comprises the same kind of infor- 
mation and functionality relating to PDP contexts as GGSN typically has. In 
case of incoming packets to the CUG subscriber having an active PDP oon- 
5 text, the PTM-SC is thus aware of the correct SGSN that currently serves the 
CUG subscriber. 

A response to the request for PDP context activation is sent from 
the PTM-SC to the SGSN [create_PDP_context_res]. The response comprises 
an PTM-SC address for signalling and an PTM-SC address for user traffic, 
10 which may differ from that provided by tine underlying network service. The 
SGSN stores these PTM-SC addresses and uses them when sending signal- 
ling or user data packets to the PTM-SC for the MS. If the MS has requested 
dynamic PDP address and a dynamic PDP address has been allowed, the re- 
sponse also contains the dynamic PDP address for the MS allocated by the 
15 PTM-SC. TTie response from the PTM-SC may comprise some CUG parame- 
ters, which the SGSN advantageously relays transparently to the MS. For ex- 
ample, the CUG parameters may comprise informatk)n about CUG members 
or CUG restrictions. 

If the SGSN receives the response witii the cause value Indicating 
20 'Request Accepted', the SGSN retums a message of accepted PDP context 
request to the MS [activate_PDP_context_aocept], The message comprises 
information relating to the PDP context and possibly CUG parameters from the 
PTM-SC. If the MS accepts the PDP context, packets may be transferred 
to/from the MS from/to the PTM-SC. 
25 The PDP context is then active and all data traffic to/from the MS 

goes through the PTM-SC according to subscriber conditions of the selected 
CUG. The PTM-SC thus relays of packets to/from other CUG sul)scribers or 
to/from other addresses possibly in external networks. 

As described eariler, the CUG may be selected as part of the PDP 
30 context activation. It Is also possible that the CUG is selected independently of 
the PDP context activatk>n. The PDP context may be activated in the PTM-SC 
without selecting any CUG. The CUG may be selected transparently to the 
PDP context by sending a speciffc CUG activatfon message to the PTM-SC 
(after the PDP context is established). Thus the PDP context activation proce- 
ss dure may be canied out according to the prior art. This allows also the activa- 
tion of several CUGs for one MS utilizing one PDP context. If the subscriber 
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has selected more than one CUG utilizing a single PDP context, a CUG identi- 
fier is preferably associated with transferred data packets. The PTM-SC is 
then able to choose the access conditions of the identified CUG. If no CUG 
identifier is determined, the preferred CUG may be used. However, in the fbl- 
6 lowing description, it Is assumed that it is possible to select one CUG per PDP 
context and thus no CUG identifier needs to be associated with transferred 
packets. 

According to the inventton, a CUG subscriber may send packets to 
all active group subscribers, to at least one group subscriber or outside the 

10 group depending on the CUG access conditions. Figure 4 shows a flow chart 
illustrating the basic functionality of the PTM-SC in the case of incoming and 
outgoing packets relating to CUG subscribers. 

A CUG subscriber needs an active PDP context in order to send 
packets. Packets are transferred to the SGSN which forwards them to the 

15 PTM-SC 40. Preferably the CUG selected during the PDP context activation 
procedure will be automatically used. This means that the PTM-SC finds out 
the subscriber's access conditions according to the selected CUG 41 and 
evaluates whether the packets may be delivered on the basis of the access 
conditions 42. The checked access conditions may comprise ou^oing access 

20 conditions and conditions relating to the requested address. If the access con- 
ditions do not allow packets to be sent to the recipient the PTM-SC will disre- 
gard the packets and preferably send an error message to the sender sub- 
scriber 43. 

If the access conditions of the MS permit the transfer of packets to 
25 the destination address, the PTM-SC will check if there are any further restric- 
tions relating to the recipient 44. if the packets are addressed to another sui:>- 
scriber under conditions of the same or another CUG. the PTM-SC will check 
die recipient's CUG access conditions 45. The checked access conditions may 
comprise incoming access conditions and conditk^ns relating to the sender 
30 address. If there are no CUG conditions concerning the reclprerrt or the recipi- 
ent's CUG conditfons allow the reception of packets from the sender sub- 
scriber, the PTM-SC may initiate the delivery of packets to the recipient 46. If 
the access conditions do not allow the reception of packets, the packet will be 
disregarded 43. If packets received outside the CUG are addressed for a CUG 
35 subscriber 47, the recipient subscriber's access conditkDns will t>e checked cor- 
respondingly. 
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According to a preferred embodiment of the invention, as the ac- 
cess conditions are once checked for a certain packet, following packets to 
and from the same address will be transferred without any rechecking of CUG 
access conditions. 

5 A CUG subscriber may be willing to send packets to all CUG sub- 

scnl>ers. If packets are addressed to the CUG, the PTM-SC finds out the sub- 
scribers belonging to the CUG. The packets may comprise a CUG identifrer, 
which can be used to klentHy the CUG as the recipient Depending on the 
CUG subscription, the PTM-SC may also Interpret the CUG as the recipient If 

10 the packets have no destination address. As CUG subscribers may have dif- 
ferent access conditions, the PTM-SC may check the access conditions for 
each subscriber. However, as the packets are meant for all CUG subscribers, 
the check may not be needed. The PTM-SC then delivers the packets to al- 
lowed subscribers. 

15 If packets are targeted outside the CUG, the PTM-SC preferably 

checks the subscriber's CUG outgoing access condrtlons (OA, Outgoing Ac- 
cess). As described eariier, there may be also Internet-address specific limita- 
tions. If the subscriber is allowed to send packets, the PTM-SC forwards the 
packets according to destination address. Thus the transmission of packets 

20 may be limited e.g. to certain company's internet sites. 

According to the invention a CUG subscriber (MS) may communi- 
cate point-to-point with another subscriber (MS2) belonging to the same CUG. 
Thus the MS sends data packets to the SGSN identifying the MS2 address as 
the recipient. The address of the MS2 depends on the context type, typically 

25 IP addresses are used. The SGSN relays the packets to ttie PTM-SC accord- 
ing to the active PDP context of the MS. 

The PTM-SC preferably chedcs the CUG intira-group access condi- 
tions of the MS and the MS2. The PTM-SC may check the OAG-condition 
(Outgoing Access within the group) for the MS and lAG-condition (lAG, In- 

30 coming Access within the group) for ttie MS2. If the access conditions of the 
MS allow the transmission and the access conditions of the MS2 allow the re- 
ception, the PTM-SC may deliver the packets to the MS2, 

According to the invention, a CUG subscriber may also send pack- 
ets to or receive packets from more than one group member. For instance, the 

35 MS may send packets to three members of the group consisting of ten mem- 



4 
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bers. The delivery may be carried out as three separate deliveries or as a sin- 
gle delivery comprising three addresses of the recipients. 

The PTM-SC may also comprise a DNS (Dynamic Name Service), 
which enables logical names to be associated with CUG subscribers. For ex- 
5 ample, packets sent by a CUG subscriber may identify "Mike** as the recipient 
instead of an ordinary IP address. The Pl^-SC is then able to associate, the 
logical name ''Mike" as the subscriber of the CUG and deliver the packet to the 
right IP-address of "Mike", Furthermore, some group memk>ers may be logi- 
cally grouped e.g. by single ''colleagues" Identity. The PTM-SC then delivers 
10 the packets to members on the basis of the identity. 

A GPRS attached CUG subscriber may receive packets from CUG 
subscribers and also from other allowed addresses. In the following, the PTP 
delivery of packets to a CUG subscriber will be described, the assumption Is 
that the subscriber's access oonditk>ns altow the reception of packets. 
15 Packets from external networks for a CUG subscriber may be 

routed through the PTM-SC in the same way as packets are routed through 
the GGSN. From the external networks' point of view the PTM-SC may be 
seen as a router to a subnetwork comprising CUG subscribers. The sender 
needs to know the IP address of the CUG subscriber that belongs to the ad- 
20 dress space controlled by the PTM-SC. If packets are addressed to a single 
CUG subscriber, the CUG identifier Is not necessary. In order to send packets 
to all members of the CUG, a group specific address has to be reserved. 

If the PDP context is active for the CUG subscriber, the PTM-SC 
may easily fonvard the packets to the correct SQSN. The SGSN transfers the 
25 packets to the correct BSC. The BSC then sends the packets to the correct 
BTS which further delivers the packets to the CUG subscriber. 

The request for PDP context activation can also be made by the 
network if packets are addressed a CUG subscrit>er without an active context 
and the MS is attached to the GPRS networic. In this case the PTM-SC may 
30 initiate the PDP context activation procedure. The PTM-SC may send a rout- 
ing information request to the subscriber's HLR. If the request can be served, 
the HLR returns routing information comprising the address of the correct 
SGSN address to the PTM-SC. The PTM-SC may then initiate PDP context 
activation by notifying the SGSN of incoming data for the subscriber. The 
35 SGSN then sends a request for PDP context activation for the MS. The PDP 
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context may be then activated according to the above description. As the POP 
context is activated, the packets may be sent to the sul:>scriber. 

In case of multiple recipients (CUG subscribers), packets may be 
sent also according to the packet delivery of the PTM-G service. Thus the 

5 CUG packets may be delivered by broadcasting to the relevant SGSNs or by 
initiating point-to-point transmisstons for each subscriber by the PTM-SC. The 
PTP transmission of packets of the CUG service is easy to implement, be- 
cause it can reuse the existing reliable FTP bearer services. The usage of the 
PTP makes the service transparent to other network elements like the SGSN. 

10 but if there are many CUG subscribers in one cell or routing area, the load on 
the network may increase dramatioalty. The invention can be applied irrespec- 
tive of the packet delivery method. 

If the subscriber receives packets correctly, a positive acknow- 
ledgement may be sent from the MS to the PTM-SC. The PTM-SC may then 

16 send an acknowledgement to the sender If there are multiple recipients, the 
PTM-SC preferably sends a single message to the sender informing the suc- 
cess of deliveries to recipients. 

Routing area updates may be carried out according to the prior art 
GPRS technology. If tiie sending SG8N changes, then ttie PTM-SC will be no- 

20 tified advantageously in the same way as the GGSN is notified during routing 
area updates. The PTM-SC does not have to be aware of the current location 
of a CUG subscriber 

The PDP context may be deactivated by the MS, SGSN or PTM- 
SC. The deactivation of the PDP context or GPRS detach removes the PDP 

25 context information in the PTM-SC. It is also possible that timers are used to 
limit the usage of PDP context. Preferably the CUG chosen at PDP context 
activafion will be used until the PDP context information is removed. 

The PTM-SC functions relating to the CUG service described above 
may be implemented also In other networi^ elements. The PTIM-SC according 

30 to the above description also comprises the GGSN functk>nality» especially 
relating to PDP activation. Thus CUG functions may be implemented in the 
GGSN instead of the PTM-SC. It is also possible tfiat the PTM-SC does not 
comprise any GGSN functionality, when GGSN is needed for providing access 
from the PTRA-SC to other networks. 
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There may also be a separate CUG network element controlling 
specially dosed user group services, or CUG functions may be implemented in 
a subscriber database such as the HLR. 

It is obvious to one skilled in the art that as the technology devel- 
5 ops. the inventive concept can be implemented in many different ways. Hence 
the invention and its embodiments are not limited to the above examples, but 
may vary within the scope of the appended claims. 
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Claims 

1 . A method of providing closed user group service in a mobile 
communication system enabling packet-switched data sen/ices, comprising at 
least one networi^ and at least one group comprising a plurality of group sub- 

5 scribers, the network enabling the transfer of packets to pre-defined group 
subscribers, characterized by 

determining ck>sed user group access conditions for at least one 
subscriber belonging to the group, said access conditions comprising at least 
one of the following conditions: 
10 right to communicate mth parties outside the group, 

right to communicate with at least one member of the group vyritticHit 
communicating with all members of the group, 

checking said access conditions when packets are being sent 
to/ftom the subscriber and 
15 transferring packets to desired addresses if said access conditions 

allow the transmission. 

2. Amethodaccordingtodalml, characterized by 
determining in said access conditions the addresses that are al- 
lowed. 

20 3. A method according to daim 1or2, characterized by 

determining in said access conditions outgoing and incoming ac- 
cess conditions separately. 
: • - . 4. A method according to any one of the preceding daims, c h a r - 

acterizedby 

25 transferring adjacent packets without rechecking said access condi- 

tions after first packet, in response to the checking of said access conditions of 
the first packet and the source and the destination addresses in the adjacent 
packets being the same as in the first packet. 

5. A method according to any preceding dalm, character- 

30 i zed by 

selecting a group for the subscriber during the activation of data 
transfer arrangement for a mobile station of the subscriber and 

using the access conditions of the selected group when packets 
to/from the subscriber are being sent until the data transfer arrangement is 
35 deactivated or reconfigured. 

. 6. A method according to claim 5, characterized in that 

! 
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the data transfer arrangement is packet data protocol PDP context. 

7. A method according to any one of claims 1 to 4, charac- 
terized by 

identifying the used group when data packets are being sent and 
5 using the access conditions of the IdentHied group for the data 

packets. 

8. A method according to any one of the preceding claims, char- 
acterized by 

determining said access conditions in network element oontrolling 
1 0 the point to multipoint packet service and 

transferring all packets to or from the subscriber through said net- 
work element. 

9- A mobile telecommunications system providing packet-switched 
data sen/ices, comprising at least one network and at least one group com- 
15 prising a plurality of group subscribers, the networi^ being arranged to transfer 
packets to pre-defined group subscribers, characterized in that 

the network comprises means for determining closed user group 
access conditions for at least one sut>scriber belonging to the group, sakl ac- 
cess conditions comprising at least one of the foibmng conditions: 
20 right to communicate with parties outside the group, 

right to communicate with at least one member of the group without 
communicating with all members of the group, 

the network is arranged to check said access conditions when 
packets are being sent to/from the subscriber and 
25 the network is arranged to transfer padcets to desired addresses if 

said access conditions allow the transmission. 

10. A mobile telecommunications system according to claim 9, 
characterized in that 

said access conditions comprise allowed addresses and/or sepa- 
30 rate conditions for outgoing and incoming packets. 

11 . A mobile telecommunications system according to claim 9 or 10, 
characterized in that 

the network is arranged to transfer adjacent packets without re- 
checking said access conditions after first packet, in response to the checking 
35 of said access conditions of the first packet and the source and the destination 
addresses in the adjacent packets being the same as in the first packet. 
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12. A mobile telecommunications system according to any one of 
ciaim$9 to 11, cha racterized in that 

the network is ananged to select a group for the subscriber during 
the activation of data transfer anangement for a mobile station of the sub- 
5 scriberand 

the network is arranged to use the access conditions of the selected 
group when packets to/from the subscriber are being sent until the data 
transfer arrangement is deactivated or reconfigured. 

13. A mobile telecommunications system according to claim 12, 
10 characterized inthat 

ttie data transfer anangement is packet data protocol PDP context, 

14. A mobile telecommunications system according to any one of 
clalms9to 11, characte rized inthat 

ttie network Is ananged to identily the used group wiien data pack- 
15 ets are being sent and 

the network Is arranged to use the access conditions of the identi- 
fied group for the data packets. 

15. A mobile telecommunications system according to any one of 
claims 9 to 14, characterized in that 

20 said access conditions are determined in network element control- 

ling the point to multipoint packet service and 

tfie network is ananged to transfer all packets to or from the sub- 
scriber through sakl network element 

16. A network element in a packet radio system, character- 
25 i z e d in that 

the network element comprises means for determining access con- 
ditions for at least one subscriber belonging to at least one closed user group, 
sakl access conditions comprising at least one of the following conditions: 
right to communicate with parties outside the group, 
30 right to communicate with at least one member of the group witiiout 

communicating with all members of the group, 

the network element comprises means for checking said access 
conditions when packets are being sent to/ftom the sut)scriber and 

the networic element is arranged to send packets if said access 
35 conditions allow thie transmission. 

... 
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(57) Abstract 

A method and apparatus for providing closed user group 
service in a packet radio system, which comprises at least 
one networic and at least one group comprising a plurality 
of subscribers. The closed user group access conditions 
for at least one sut>scriber are determined in the network, 
the access conditions comprise at least one of the follow- 
ing conditions: 

right to communicate with parties outside the group, 
right to communicate with at least one member of the 
group without communicating with all rriembers of the 
group. 

The access conditions are chedced when packets are 
being sent to/from the subscriber The packets are trans- 
ferred if the access conditions alk>w the transmission. 

(Fig. 4) 
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